summaryrefslogtreecommitdiffstats
path: root/arch/tde-deps/lcms/cve-2013-4276.patch
diff options
context:
space:
mode:
authorSlávek Banko <[email protected]>2022-10-28 01:38:39 +0200
committerSlávek Banko <[email protected]>2022-10-28 06:51:54 +0200
commit0efff2a27d4255f27d967351ee52089b5d9c39c1 (patch)
treebe5fcaebac660000f93bbc5a45383cc4ce1b26b1 /arch/tde-deps/lcms/cve-2013-4276.patch
parentb5b568ce2f45981161aa438622004799aa3f7a4d (diff)
downloadtde-packaging-0efff2a27d4255f27d967351ee52089b5d9c39c1.tar.gz
tde-packaging-0efff2a27d4255f27d967351ee52089b5d9c39c1.zip
ArchLinux: Update for final R14.0.13.r14.0.13
Add aarch64 and armv7h to architectures. Add pkgbuilds for several applications. Add pkgbuild for libkipi library. Add pkgbuilds for dependencies. Remove dependence on Python 2. Remove backported patches. Signed-off-by: Slávek Banko <[email protected]> (cherry picked from commit ddc027255b1bafb5c0544a60947b7c448140e384)
Diffstat (limited to 'arch/tde-deps/lcms/cve-2013-4276.patch')
-rw-r--r--arch/tde-deps/lcms/cve-2013-4276.patch62
1 files changed, 62 insertions, 0 deletions
diff --git a/arch/tde-deps/lcms/cve-2013-4276.patch b/arch/tde-deps/lcms/cve-2013-4276.patch
new file mode 100644
index 000000000..8f2f32297
--- /dev/null
+++ b/arch/tde-deps/lcms/cve-2013-4276.patch
@@ -0,0 +1,62 @@
+diff -ur lcms-1.19.dfsg/samples/icctrans.c lcms-1.19.dfsg-patched/samples/icctrans.c
+--- lcms-1.19.dfsg/samples/icctrans.c 2009-10-30 15:57:45.000000000 +0000
++++ lcms-1.19.dfsg-patched/samples/icctrans.c 2013-08-06 11:53:14.385266647 +0100
+@@ -86,6 +86,8 @@
+ static LPcmsNAMEDCOLORLIST InputColorant = NULL;
+ static LPcmsNAMEDCOLORLIST OutputColorant = NULL;
+
++unsigned int Buffer_size = 4096;
++
+
+ // isatty replacement
+
+@@ -500,7 +502,7 @@
+
+ Prefix[0] = 0;
+ if (!lTerse)
+- sprintf(Prefix, "%s=", C);
++ snprintf(Prefix, 20, "%s=", C);
+
+ if (InHexa)
+ {
+@@ -648,7 +650,9 @@
+ static
+ void GetLine(char* Buffer)
+ {
+- scanf("%s", Buffer);
++ char User_buffer[Buffer_size];
++ fgets(User_buffer, (Buffer_size - 1), stdin);
++ sscanf(User_buffer,"%s", Buffer);
+
+ if (toupper(Buffer[0]) == 'Q') { // Quit?
+
+@@ -668,7 +672,7 @@
+ static
+ double GetAnswer(const char* Prompt, double Range)
+ {
+- char Buffer[4096];
++ char Buffer[Buffer_size];
+ double val = 0.0;
+
+ if (Range == 0.0) { // Range 0 means double value
+@@ -738,7 +742,7 @@
+ static
+ WORD GetIndex(void)
+ {
+- char Buffer[4096], Name[40], Prefix[40], Suffix[40];
++ char Buffer[Buffer_size], Name[40], Prefix[40], Suffix[40];
+ int index, max;
+
+ max = cmsNamedColorCount(hTrans)-1;
+diff -ur lcms-1.19.dfsg/tifficc/tiffdiff.c lcms-1.19.dfsg-patched/tifficc/tiffdiff.c
+--- lcms-1.19.dfsg/tifficc/tiffdiff.c 2009-10-30 15:57:46.000000000 +0000
++++ lcms-1.19.dfsg-patched/tifficc/tiffdiff.c 2013-08-06 11:49:06.698951157 +0100
+@@ -633,7 +633,7 @@
+ cmsIT8SetSheetType(hIT8, "TIFFDIFF");
+
+
+- sprintf(Buffer, "Differences between %s and %s", TiffName1, TiffName2);
++ snprintf(Buffer, 256, "Differences between %s and %s", TiffName1, TiffName2);
+
+ cmsIT8SetComment(hIT8, Buffer);
+